474 matches found
CVE-2007-4679
CVE-2007-4679 affects Apple Mac OS X 10.4–10.4.10 via CFNetwork’s FTP implementation. Remote FTP servers can craft PASV responses to cause the client to connect to an attacker‑controlled host. Impact: partial integrity, no confidentiality or availability impact stated; exploit requires network ac...
CVE-2007-4679
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...
CVE-2007-4679: Undefined Security Weakness
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...
openSUSE 10 Security Update : seamonkey (seamonkey-3631)
This update brings Mozilla SeaMonkey to security update version 1.1.2 - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome such a...
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-3545)
This update brings Mozilla Thunderbird to security update version 1.5.0.12. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome...
openSUSE 10 Security Update : seamonkey (seamonkey-3632)
This update brings Mozilla SeaMonkey to security update version 1.1.2 - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome such a...
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3541)
This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content...
Moderate: kdelibs security update
3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...
Command injection
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...
CVE-2007-3768
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...
CVE-2007-3768: Undefined Security Weakness
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service restart via a malformed response to a PASV command...
Mozilla Foundation Security Advisory 2007-11
Mozilla Foundation Security Advisory 2007-11 Title: FTP PASV port-scanning Impact: Low Announced: March 20, 2007 Reporter: [email protected] Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.3 Firefox 1.5.0.11 Description The FTP protocol includes the PASV passive command which is used by...
CVE-2007-1563
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...
Information disclosure
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...
CVE-2007-1564
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...
Mozilla FireFox 1.5.x2.0 - FTP PASV Port-Scanning
Mozilla FireFox 1.5.x2.0 - FTP PASV Port-Scanning source: https://www.securityfocus.com/bid/23082/info Mozilla Firefox is prone to vulnerability that may allow attackers to obtain potentially sensitive information. A successful exploit of this issue would cause the affected application to connect...
CVE-2007-1562: Exposure of Sensitive Information to an Unauthorized Actor
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response...
FTP PASV port-scanning — Mozilla
The FTP protocol includes the PASV passive command which is used by Firefox to request an alternate data port. The specification of the FTP protocol allows the server response to include an alternate server address as well, although this is rarely used in practice...
3APA3A : Using FTP protocol weaknesses
How to exploit bugs in the implementation of the FTP protocol David Sacerdot, in his article on the vulnerability of the FTP protocol and dated as early as April 1996, theoretically the vulnerability of the FTP protocol if it is incorrectly implemented. Two points are interesting in the article,...
